CVE-2026-104141 | DataEase up to 2.10.25 Datasource Metadata CalciteProvider sql injection

October 14, 2026 Yanac

A vulnerability identified as critical has been detected in DataEase up to 2.10.25. The impacted element is an unknown function of the file CalciteProvider of the component Datasource Metadata. The manipulation leads to sql injection.

This vulnerability is uniquely identified as CVE-2026-104141. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More